CVEvulnerability
CVE-2018-12152
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.
Affected configurations
• intel graphics driver 15.33.43.4425
• intel graphics driver 15.33.45.4653
• intel graphics driver 15.33.46.4885
• intel graphics driver 15.33.47.5059
• intel graphics driver 15.36.26.4294
• intel graphics driver 15.36.28.4332
• intel graphics driver 15.36.31.4414
• intel graphics driver 15.36.33.4578
• intel graphics driver 15.36.34.4889
• intel graphics driver 15.36.35.5057
• intel graphics driver 15.40.34.4624
• intel graphics driver 15.40.36.4703
• intel graphics driver 15.40.37.4835
• intel graphics driver 15.40.38.4963
• intel graphics driver 15.40.41.5058
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://seclists.org/fulldisclosure/2019/Oct/55 seclists.org
- http://seclists.org/fulldisclosure/2019/Oct/56 seclists.org
- http://www.securityfocus.com/bid/105582 Third Party Advisory, VDB Entry
- https://support.apple.com/kb/HT210634 support.apple.com
- https://support.apple.com/kb/HT210722 support.apple.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html Mitigation, Vendor Advisory
- http://seclists.org/fulldisclosure/2019/Oct/55 seclists.org
- http://seclists.org/fulldisclosure/2019/Oct/56 seclists.org
- http://www.securityfocus.com/bid/105582 Third Party Advisory, VDB Entry
- https://support.apple.com/kb/HT210634 support.apple.com
- https://support.apple.com/kb/HT210722 support.apple.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html Mitigation, Vendor Advisory